Host your own
key system.
Plug it into anything.
Keystation is one platform for three kinds of credentials — script keys with HWID locks & checkpoints, API keys with scopes & rate limits, and software licenses with activation control. Tenants sign up with Nabzclan, mint keys, hit /api/v1.
- validation p95
- 38ms
- regions
- global
- uptime sla
- 99.99%
Three flavors of
credential.
One operator console.
Pick the product surface that matches what you're shipping. Mix and match within a tenant — every key surface speaks the same API shape, so your client code rarely changes.
Script keys
HWID-locked, checkpoint-gated keys for executor scripts. Bind to a player, gate behind ad-link checkpoints, set lifetime in minutes or days. Bypass-resistant by design.
- HWID binding (first-use lock)
- Multi-step ad checkpoints
- Time-windowed lifetime
- Discord ID gating
API keys
Scoped sk_xxx keys for SaaS-style API access. Rate limit per key, allow-list origins, rotate from the dashboard. Per-route quota tracking out of the box.
- Scoped permissions
- Per-key rate limits
- Origin allow-list
- Usage quotas
License keys
Activation-limited keys for paid software. Bind to machine fingerprints, deactivate seats from the panel, track installs across versions. License hand-off is one POST.
- Activation limits per key
- Machine fingerprint binding
- Seat management
- Offline grace period
Ship your code,
not the recipe.
Every Keystation plan ships with a built-in obfuscator covering seven languages — Lua for executors, JavaScript for browsers, PHP for endpoints, HTML/CSS for pages, plus Python and JSON. Three strength presets, one click, never leaves our infra.
Sell your keys.
Keep every dollar.
Keystation ships with a built-in store. List any project as a product, set your price, and let buyers pay with Stripe or PayPal. Keys are auto-minted on payment — no manual delivery, no platform cut, ever.
Connect via OAuth or bring your own API keys — your choice.
You bring your own Stripe or PayPal credentials. Every cent lands in your account — we take nothing.
A fresh key is minted and emailed to the buyer the moment payment clears. No manual steps, no copy-paste.
Set TTL, HWID lock, rate limits, max activations — per listing. Each buyer gets a unique key with your exact config.
Every seller gets a personal store page at /store/[yourId]. Share the link wherever you distribute your work.
- Order lookup by email
- Email receipts + key delivery
- Reference numbers per order
From signup to validated key in under three minutes.
Sign in with Nabzclan
OAuth handshake against nabzclan.vip with scope user:read. No new accounts, no new passwords. Your operators don't onboard twice.
Spin up a project
Pick a surface — script, API or license — give it a name, choose your defaults for HWID, lifetime, scopes, rate limits. You get a public_id and a secret.
Hit /api/v1
Drop the validate snippet into your script, server or installer. We respond in under 40ms with the verdict and fire a webhook the moment anything noteworthy happens.
What kinds of keys can I host on Keystation?+
Three surfaces: script keys (HWID-locked, checkpoint-gated, time-windowed — for Lua/Roblox executors), API keys (sk_xxx with scopes, rate limits, origin allow-list — for SaaS APIs), and software license keys (activation-limited with machine binding — for desktop/mobile apps).
Which languages does the built-in obfuscator support?+
JavaScript, Lua, PHP, HTML, CSS, Python and JSON. Three strength presets per language with engine-specific options like HWID-bound payload wrapping, string encryption, anti-debug, and multi-pass eval nesting.
How does authentication work?+
Keystation uses Nabzclan OAuth — your operators sign in with their existing Nabzclan account (scope user:read). Subscription tier (Free, VIP·1 – VIP·4) syncs automatically from subscriptions.nabzclan.vip and gates per-plan limits.
What does the validate endpoint return?+
A JSON verdict: { valid: true|false, key_id, type, expires_at, scopes, metadata } or a rejection with a reason code (invalid_key, expired, hwid_mismatch, activation_limit, checkpoints_required). Hits typically respond in under 40ms.
Can I integrate with my own server using API calls?+
Yes. The validate endpoint is callable with just the public project ID. Administrative operations (generate, revoke, inspect) require the project's API secret as a Bearer token. Webhooks fire HMAC-signed POSTs on every key event.
Is there a free plan?+
Yes. The Free tier includes 1 project, 100 keys, 1,000 validations per month, 25 obfuscations per month, and the full API surface. Paid tiers add capacity and unlock larger obfuscation inputs.
How does the key store work?+
Every Keystation user gets a personal store page at /store/[yourId]. You list a project, configure key options (TTL, HWID lock, rate limits, activations), set a price, and buyers pay through Stripe or PayPal. A fresh key is minted and emailed to the buyer the moment payment clears — fully automated. You bring your own Stripe or PayPal credentials, so every dollar goes straight to your account. Keystation takes zero cut.
One endpoint.
Every stack.
The validate endpoint takes a key and a fingerprint, returns a verdict. Lua scripts, Node servers, Python installers, plain curl — they all speak the same dialect.
curl -X POST https://keysystem.nabzclan.vip/api/v1/keys/validate \
-H "x-project: p_arctic_fox_92" \
-H "Content-Type: application/json" \
-d '{
"key": "KS-7H2P-VLNX-9KJ4",
"hwid": "7a3f2e9b4c1d8a"
}'Everything an operator
needs out of one panel.
Real-time analytics
Validation volume, success rates, top failing keys, geo breakdown. Drill down by route or by key.
HMAC-signed webhooks
key.validated · key.activated · checkpoint.complete · license.revoked. Retries with exponential back-off.
HWID locks
First-use binding for script keys.
Ad-gated checkpoints
Linkvertise · Lootlabs · Workink slots.
Audit log
Every action, signed and retained.
Activation limits
Cap seats per license, deactivate from the panel, allow offline grace.
Per-key rate limiting
Token-bucket per key. Hot keys get throttled, not your platform.
Pay for throughput, not seats.
Five tiers, billed and managed through Nabzclan. Every tier includes the full API surface, the full dashboard, and unlimited team seats.
Free
- 1 project
- 100 active keys
- 1k validations / mo
- 3 webhooks / project
- 25 obfuscations / mo
- 50 KB max obfusc. input
- 7d log retention
VIP Tier 1
- 3 projects
- 500 active keys
- 25k validations / mo
- Unlimited webhooks / project
- 250 obfuscations / mo
- 200 KB max obfusc. input
- 30d log retention
- Custom key prefix
VIP Tier 2
- 10 projects
- 5k active keys
- 250k validations / mo
- Unlimited webhooks / project
- 2.5k obfuscations / mo
- 1 MB max obfusc. input
- 90d log retention
- Custom key prefix
VIP Tier 3
- Unlimited projects
- 50k active keys
- 1M validations / mo
- Unlimited webhooks / project
- 25k obfuscations / mo
- 5 MB max obfusc. input
- 180d log retention
- Custom key prefix
VIP Tier 4
- Unlimited projects
- Unlimited active keys
- Unlimited validations / mo
- Unlimited webhooks / project
- Unlimited obfuscations / mo
- Unlimited max obfusc. input
- 365d log retention
- Custom key prefix
Plans are managed on subscriptions.nabzclan.vip/plans ↗ — your tier syncs to Keystation automatically.
Mint the first key.
Watch it light up.
Sign in with Nabzclan, spin up a project, paste two lines of code into your stack. The console wakes up the second something validates.